Predicting common web application vulnerabilities from input validation and sanitization code patterns

• Main Authors: SHAR, Lwin Khin, TAN, Hee Beng Kuan
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2012
• Subjects: Defect prediction; static code attributes; web application vulnerabilities; input validation and sanitization; empirical study; Information Security; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4678; https://ink.library.smu.edu.sg/context/sis_research/article/5681/viewcontent/Predicting_Common_Web_App_Vunerabilities_2012.pdf
• Institution: Singapore Management University

Software defect prediction studies have shown that defect predictors built from static code attributes are useful and effective. On the other hand, to mitigate the threats posed by common web application vulnerabilities, many vulnerability detection approaches have been proposed. However, finding al...